arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2407.09809cs.AI
收藏

通过欺骗机制保护马尔可夫决策过程(MDPs)中奖励函数的隐私

Preserving the Privacy of Reward Functions in MDPs through Deception

Singapore Management University(新加坡管理大学);International Institute of Information Technology, Hyderabad(海得拉巴国际信息技术学院)

Shashank Reddy Chirra, Pradeep Varakantham, Praveen Paruchuri

AI总结:

针对MDPs中奖励函数易被IRL观测者窃取、现有差分隐私方法无法保障最低期望奖励且抗IRL能力不足的问题,提出基于欺骗理论中模拟模式的RL规划算法,在保障期望奖励的同时提升了隐私保护效果。

摘要:

在决策行为可被观测的场景下,保护序贯决策智能体的偏好(即奖励)隐私在众多物理安全与网络安全领域至关重要。例如在野生动物监测场景中,智能体需合理分配巡逻资源,同时不能向偷猎者泄露动物的位置信息。本文针对马尔可夫决策过程(MDPs)中的序贯动作规划隐私保护问题展开研究,其中奖励函数代表需要被保护的偏好结构。观测者可利用逆强化学习(Inverse RL, IRL)学习这些偏好,使得该问题极具挑战性。\n当前关于奖励函数差分隐私的研究无法保证最低期望奖励,且其提供的理论保障不足以抵御基于IRL的观测者的攻击。为弥补这一缺口,本文提出一种基于欺骗理论的全新方法。欺骗包含两种模式:掩饰(dissimulation,即隐藏真实信息)和模拟(simulation,即展示虚假信息)。本文的第一项贡献是从理论上证明了现有基于掩饰的方法存在严重的隐私泄露问题。第二项贡献是提出一种全新的基于强化学习(RL)的规划算法,该算法采用模拟模式,在保证期望奖励有保障的同时,有效解决了上述隐私问题。在多个基准问题上的实验结果表明,本文方法在保护奖励函数隐私方面优于现有方法。

英文摘要:

Preserving the privacy of preferences (or rewards) of a sequential decision-making agent when decisions are observable is crucial in many physical and cybersecurity domains. For instance, in wildlife monitoring, agents must allocate patrolling resources without revealing animal locations to poachers. This paper addresses privacy preservation in planning over a sequence of actions in MDPs, where the reward function represents the preference structure to be protected. Observers can use Inverse RL (IRL) to learn these preferences, making this a challenging task. Current research on differential privacy in reward functions fails to ensure guarantee on the minimum expected reward and offers theoretical guarantees that are inadequate against IRL-based observers. To bridge this gap, we propose a novel approach rooted in the theory of deception. Deception includes two models: dissimulation (hiding the truth) and simulation (showing the wrong). Our first contribution theoretically demonstrates significant privacy leaks in existing dissimulation-based methods. Our second contribution is a novel RL-based planning algorithm that uses simulation to effectively address these privacy concerns while ensuring a guarantee on the expected reward. Experiments on multiple benchmark problems show that our approach outperforms previous methods in preserving reward function privacy.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑